Need a geek? Geeks to Go offers free, quality tech support -- in terms anyone can understand. Volunteers are waiting to help, friendly, technology experts who have knowledge to share, and enjoy helping others. Feel free to browse the site as a guest. However, you must log in to reply to existing topics, or to start a new topic of your own. Other benefits of joining include richer forum features, and removal of all advertising. Learn more in our Welcome Guide Infected? Malware and Spyware Cleaning Guide. What are you waiting for? Click here to join for free today!
3 Pages V  < 1 2 3 >  
 Reply to this topicStart new topic
cannot renew ip address
Dan
post Apr 8 2009, 01:49 AM
Post #16


Trusted Tech
Group Icon
Posts: 1,763
From: QLD, Australia
OS: Vista
Thanks. Try setup a static IP and see what happens.

Step 1 - Configure a Static IP:
  1. Click Start, select Run, type ncpa.cpl and press OK
  2. In the new window, right-click on your Wireless Network Connection and select Properties.
  3. Select Internet Protocol Version (TCP/IP) and then press the Properties button.
  4. Select the option Use the following IP Address: and then enter in the following details:
    • IP Address: 192.168.1.15
    • Subnet Mask: 255.255.255.0
    • Default Gateway: 192.168.1.1
  5. Select Use the following DNS Servers and enter in two DNS Servers.
    • Preferred DNS Server: 192.168.1.1
    • Alternate DNS Server: <leave blank>
  6. Press OK.
Try to connect to your wireless network now; can you?
Go to the top of the page
 
+Quote Post
johnnyhobbs
post Apr 8 2009, 01:55 AM
Post #17


Member
**
Posts: 28
OS: Windows XP
You're welcome.

It says it is connected, but when I open firefox or internet explorer, both come up with a cannot view page
Go to the top of the page
 
+Quote Post
Dan
post Apr 8 2009, 02:05 AM
Post #18


Trusted Tech
Group Icon
Posts: 1,763
From: QLD, Australia
OS: Vista
Okay, repeat the steps I had you do to setup the Static IP, but revert them back to their Automatic settings. Not sure what time zone you're in, but I need to head off for an hour, so this'll be my last response for a bit.

Please do Part 1: Disable IEEE 802.1X Authentication from this MS Article - Wireless Connection Is Periodically Lost -- ignore the name for now. Once you have IEEE authentication disabled, try to connect; can you?

If not, please do the following.

Step 1 - Enable wireless tracing (Windows XP):
  1. Click Start, select Run, type cmd and press OK
  2. In the new command prompt window, type netsh ras set tracing * en
  3. Restart your computer. Upon reboot, attempt to view available wireless networks -- *Note: it is important that you note down the time that you tried to connect, as I will need this information in order to identify where in the log to look -- please post the exact time (Hours, minutes, day, month).
  4. Once it fails, navigate to %WINDIR%\tracing -- either type that manually into your explorer address bar, or navigate to your system root (i.e. C:\Windows\tracing).
  5. The files we're interested in are
    • Wzctrace.log
    • Eapol.log
    • Wzcdlg.log
    • Netman.log
    • Netshell.log
  6. Please ZIP these files and then upload them as an Attachment.
    *Note: if they are too large, I will PM you my e-mail address and you can send them to me that way.
  7. Once you have uploaded the ZIP file, you can disable tracing by opening a command prompt and typing netsh ras set tracing * disable
Thanks,
- Dan
Go to the top of the page
 
+Quote Post
johnnyhobbs
post Apr 8 2009, 02:27 AM
Post #19


Member
**
Posts: 28
OS: Windows XP
Reverted. Take your time. Thanks for everything so far

IEEE 802.1X Authentication was already disabled

Time: 02:20 April 8
Attached File(s)
Attached File  Tracing.zip ( 20.33K ) Number of downloads: 14
 
Go to the top of the page
 
+Quote Post
Dan
post Apr 8 2009, 03:25 AM
Post #20


Trusted Tech
Group Icon
Posts: 1,763
From: QLD, Australia
OS: Vista
A few questions:
1) What's the make and model of your network adapter?
2) What's the name (SSID) of the network you're trying to connect to? (NETGEAR?)
3) Have you ever been able to connect to this network?
4) If you use an Ethernet cable, can you connect to this network?

Thanks.
Go to the top of the page
 
+Quote Post
johnnyhobbs
post Apr 8 2009, 03:29 AM
Post #21


Member
**
Posts: 28
OS: Windows XP
I'll answer all of them later. It is 2:30 AM where I am, so I'm off to sleep. I can tell you now, though, that the connection was completely fine until about 3 days ago.
Go to the top of the page
 
+Quote Post
Dan
post Apr 8 2009, 03:36 AM
Post #22


Trusted Tech
Group Icon
Posts: 1,763
From: QLD, Australia
OS: Vista
No problem; I'll see you in the morning. I'll look through the logs tonight and hopefully post something useful for you to do before then.
QUOTE
I can tell you now, though, that the connection was completely fine until about 3 days ago.
This might mean I've been looking in the wrong place.

What have you installed in the last three days? What sort of firewall/anti-virus protection do you have in place?

Step 1 - Generate a startup and uninstall list:
Please download HijackThis (if you do not already have it) and install it -- once it is installed, restart your computer. Once the computer starts up, can you please launch HijackThis and then select the option Open the Misc Tools section -- select Generate StartupList log. Save the startup list in a safe location. Now select the option Open Uninstall Manager and then click Save list -- save it to a safe location. Please post the contents of the startup list and the uninstall list in your next response.

Step 2 - Start your machine in a clean boot state:
  1. Click Start, click Run, type msconfig, and then click OK
  2. In the new window, select the General tab and then select Selective Startup
  3. Click to clear the Process SYSTEM.INI File check box.
  4. Click to clear the Process WIN.INI File check box.
  5. Click to clear the Load Startup Items check box. Verify that Load System Services and Use Original BOOT.INI are checked.
  6. Click the Services tab.
  7. Click to select the Hide All Microsoft Services check box.
  8. Click Disable All, and then click OK.
  9. When you are prompted, click Restart to restart the computer.
When the computer reboots, are you able to connect to the network?
*Note: To return Windows to a normal startup mode, please do the following:
  1. Select Start, and then click Run.
  2. Type msconfig, and then click OK.
  3. Click the General tab, click Normal Startup - load all device drivers and services, and then click OK. When you are prompted, click Restart to restart the computer.
Step 3 - Download and run LSPFix:
Please download LSPFix from here. Run the LSPFix.exe that you have just finished downloading, and list all of the protocols that are in the 'Keep' and 'Remove' list; if there are protocols in the 'Remove' list, then please don't click 'Finish>>'. Simply close the program by pressing ALT+F4 or the Close [x] button.

G'night.
- Dan

This post has been edited by Dan: Apr 8 2009, 06:16 PM
Go to the top of the page
 
+Quote Post
johnnyhobbs
post Apr 9 2009, 12:21 AM
Post #23


Member
**
Posts: 28
OS: Windows XP
A few answers:
1) Toshiba Wireless LAN Mini PCI Card 7.43.0.9. Is this what you are looking for?
2) NETGEAR
3) 4 days ago I could
4) nope

"What have you installed in the last three days? What sort of firewall/anti-virus protection do you have in place?"
I downloaded and installed Comodo firewall. Ran a scan with t and it detected malware in NIRCMD.exe, so I deleted that file. And THAT was when I lost connection. I'm using Avast 4.8 and Comodo Firewall

Step 1 - Generate a startup and uninstall list:
Startup List
CODE
StartupList report, 4/8/2009, 11:55:21 PM
StartupList version: 1.52.2
Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
Detected: Windows XP SP3 (WinNT 5.01.2600)
Detected: Internet Explorer v7.00 (7.00.6000.16791)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\ACS.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\VCOM\SYSTEM~1\MXTask.exe
C:\PROGRA~1\VCOM\SYSTEM~1\mxtask.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

RCScheduleCheck = C:\Program Files\VCOM\Recovery Commander\RCSCHED.EXE -CHECK
Fix-It AV = C:\PROGRA~1\VCOM\SYSTEM~1\MemCheck.exe
avast! = C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
COMODO Internet Security = "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe
SpybotSD TeaTimer = C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - (no file) - {02478D38-C3F9-4EFB-9B51-7695ECA05670}
(no name) - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (file missing) - {53707962-6F74-2D53-2644-206D7942484F}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Scheduled Checkpoint.job

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll

--------------------------------------------------
End of report, 4,268 bytes
Report generated in 0.811 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only


Uninstall list
CODE
Ad-Aware
Adobe Acrobat 5.0
Adobe Flash Player 10 ActiveX
Adobe Shockwave Player 11.5
AIM 6
ALPS Touch Pad Driver
America Online (Choose which version to remove)
Atheros Client Utility
Atheros Wireless LAN MiniPCI card Driver
avast! Antivirus
CD/DVD Drive Acoustic Silencer
COMODO Internet Security
DivX Codec
HijackThis 2.0.2
Hotfix for Windows XP (KB952287)
Intel® Extreme Graphics 2 Driver
Intel® PRO Network Adapters and Drivers
Intel® PROSet/Wireless Software
IrfanView (remove only)
iTunes
Java 2 Runtime Environment, SE v1.4.2_05
mCore
mDrWiFi
mHelp
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office XP Professional with FrontPage
Microsoft Visual C++ 2005 Redistributable
mIWA
mLogView
mMHouse
Mozilla Firefox (3.0.8)
mPfMgr
mPfWiz
mProSafe
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB954430)
mWlsSafe
mXML
mZConfig
OCR Software by I.R.I.S 7.0
Pure Networks Port Magic
QuickTime
Recovery Commander
Roxio Burn Engine
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
SigmaTel AC97 Audio Drivers
Sonic RecordNow!
Spybot - Search & Destroy
TOSHIBA ConfigFree
TOSHIBA Console
TOSHIBA Hotkey Utility for Display Devices
TOSHIBA PC Diagnostic Tool
TOSHIBA Power Saver
TOSHIBA Software Modem
TOSHIBA Software Upgrades
TOSHIBA Speech System Applications
TOSHIBA Speech System SR Engine(U.S.) Version1.0
Toshiba Tbiosdrv Driver
TOSHIBA Utilities
TOSHIBA Zooming Utility
Turbo Lister 2
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
VCOM SystemSuite 5
Windows Media Format Runtime
Windows Media Player 10
Windows XP Service Pack 3
Yahoo! Messenger




Step 2 - Start your machine in a clean boot state:
Nothing

Step 3 - Download and run LSPFix:
Keep
mswsock.dll Tcpip
winrnr.dll NTDS
nwprovau.dll NWLink IPX/SPX/NetBIOS Compatible Transport Protocol
rsvpsp.dll (Protocol Handler)

Nothing in remove
Go to the top of the page
 
+Quote Post
Dan
post Apr 10 2009, 02:23 AM
Post #24


Trusted Tech
Group Icon
Posts: 1,763
From: QLD, Australia
OS: Vista
A few things here. When you installed Comodo, did you install both the firewall and antivirus components? Because you have Avast! on your machine as well; having two anti-virus applications installed and/or running at the same time can often lead to problems. Try uninstalling Comodo and see if your issues persist.

Also, since your issue started with malware, I suggest you go to the Malware Forum and run all the steps located in the START HERE thread. These self-help tools will allow you to clean up to 70% of problems on your own. If you are still having problems after performing these steps, then please follow Step Five: Rootkit Detection and Step Six: Post an OTListIt2 Log; ensure you post your logs in the Malware Forum. If you are unable to run and/or post any of these logs, then mention that in your initial post in the topic you create in that forum.

While you're doing that, we'll continue in this thread as malware may not be the cause of your issue; I simply want to make sure. Can you please check to see if you can get an Internet connection when wired to your router and in Safe Mode with Networking.

Step 1 - Restart your machine in Safe Mode with Networking:
Please restart the problematic machine in Safe Mode with Networking and then see if you can get an Internet connection; can you?
*Note: You will not be able to use a wireless connection while in Safe Mode; please ensure all tests are performed with a wired (Ethernet) connection.
Go to the top of the page
 
+Quote Post
johnnyhobbs
post Apr 10 2009, 02:58 AM
Post #25


Member
**
Posts: 28
OS: Windows XP
Thar we go! Just uninstalled Comodo and after the restart, I am now back on! Thanks! Only now I have no firewall. I'll try and redownload comodo but this time the firewall only. I think that last time I installed the full net security package
Go to the top of the page
 
+Quote Post
Dan
post Apr 10 2009, 03:11 AM
Post #26


Trusted Tech
Group Icon
Posts: 1,763
From: QLD, Australia
OS: Vista
That's great to hear thumbsup.gif

And yes -- as you said, just be careful when you install Comodo; make sure only the firewall component is selected. This is actually the reason why we some times don't recommend Comodo -- it can be quite confusing.

I'm glad we could help, and thanks for taking the time to let us know how your issue(s) were resolved; feedback is always appreciated.

- Dan
Go to the top of the page
 
+Quote Post
johnnyhobbs
post Apr 10 2009, 03:21 AM
Post #27


Member
**
Posts: 28
OS: Windows XP
Ahhhh dang it! I installed comodo making sure I installed just the firewall only and I get no connection sad.gif
Are there any other free firewalls you recommend? Seeing as we now know that that is the problem
Go to the top of the page
 
+Quote Post
Dan
post Apr 10 2009, 03:24 AM
Post #28


Trusted Tech
Group Icon
Posts: 1,763
From: QLD, Australia
OS: Vista
That's strange. We have a list of free security applications here -- you'll need to scroll down a fair bit to reach the firewall section.
Go to the top of the page
 
+Quote Post
johnnyhobbs
post Apr 10 2009, 04:09 AM
Post #29


Member
**
Posts: 28
OS: Windows XP
Well Dan, I really want to thank you again for your help. LOL it would've been nice if I had told you I got Comodo earlier. But thank you for being so patient and taking the time to guide me through this. Your services as well as those of this entire site is greatly appreciated. biggrin.gif
Go to the top of the page
 
+Quote Post
Dan
post Apr 10 2009, 07:31 PM
Post #30


Trusted Tech
Group Icon
Posts: 1,763
From: QLD, Australia
OS: Vista
You're most welcome, Johny thumbsup.gif I'm glad we could help. smile.gif
Go to the top of the page
 
+Quote Post
 

3 Pages V  < 1 2 3 >
Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

Collapse

> Similar Topics

    Topic Title Replies / Views Topic Information
No new   24 / 18,110 22nd June 2005 - 12:19 AM
farmerjohn started - last by Greazy
No New Posts   2 / 1,014 19th July 2007 - 05:27 AM
GlobalNomads started - last by GlobalNomads
No New Posts   0 / 857 29th September 2008 - 11:26 AM
vmshops started - last by vmshops
No New Posts   1 / 256 8th June 2009 - 07:24 PM
Joeturf started - last by Broni

RSS Time is now: 20th November 2009 - 09:06 PM

Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks mentioned on this page are the property of their respective owners.

© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy | Advertising
Powered By IP.Board © 2009  IPS, Inc.